Malicious code in commander-js (npm)

The package commander-js was found to contain malicious code...

MAL-2025-17408 Malicious code in commander-js (npm)

The package commander-js was found to contain malicious code...

GHSA-2HQF-QQMQ-PGPP Malicious Package in commander-js

All versions of commander-js are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads an arbitrary file and executes its contents as a post-install script. Recommendatio...

Malicious Package in commander-js

All versions of commander-js are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads an arbitrary file and executes its contents as a post-install script. Recommendatio...

PT-2020-20959

Name of the Vulnerable Software and Affected Versions commander-js versions all Description The commander-js package is malicious, designed to exploit typing mistakes when installing modules. Upon installation, it downloads and executes an arbitrary file as a post-install script. Recommendations...

Malicious Package

Overview All versions of commander-js are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads an arbitrary file and executes its contents as a post-install script...

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...